AMR (Application Monitoring and Response) Analyst

implement custom alerts and monitoring controls to detect and mitigate threats Provides leadership in assessing new threat vectors and designing and implementing effective controls. Leverages advanced investigative skills using best in class data correlation and log analysis tools. Will partner with senior leaders from lines of business organizations to triage security events and report on impacting security initiatives. Develops and implements processes or controls in support of audit and risk requirements.

This is a front line unit that handles active security events and current threats. On-call and after hours work can be expected although we rotate to approximately one week every 2 months.
The analyst will use new intelligence to update existing controls to detect new threats against the bank. Will be expected to have solid technical skills to operate independently and to support others within the security team

Required Skills:
• Strong Splunk skill set. The security analyst will leverage Splunk to analyze logs and other security events to find targeted attacks against network based bank assets.
• Strong Intrusion Analysis background. Resource must be able to identify and interpret weblogs from various webservers.
• Knowledgeable of current exploits. Resource must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems.
• Comfortable with scripting languages and regular expressions
• Strong knowledge common network protocols
• Working knowledge of enterprise Client / Server architecture

Desired Skills:
• Able to interpret Apache web logs, IIS, Active Directory and other security logs.
• Full understanding of modern web site deployments and technology.
• Understanding of stateful firewalls and able to interpret firewall rules.
• Familiarity with web application attacks including SQL injection, cross-site scripting, and remote file inclusion.
• Use tools to detect anomalous/malicious data transmissions on the network.
• Use advanced analytics / security tools to detect malware on the network.

Shift:
1st shift (United States of America)

Hours Per Week:
40

Learn more about this role